diff --git a/docs/docs/build-ayanova.md b/docs/docs/build-ayanova.md index a508786..24d5dda 100644 --- a/docs/docs/build-ayanova.md +++ b/docs/docs/build-ayanova.md @@ -4,6 +4,27 @@ If any packages have been changed in the release do a thorough security scan and check of each package. +### Security checks and tools + +#### NPM + +https://snyk.io/blog/ten-npm-security-best-practices/ +https://docs.npmjs.com/cli/v8/commands/npm-audit + +```dos +npm doctor +npm audit +``` + +#### Nuget + +https://docs.microsoft.com/en-us/nuget/concepts/security-best-practices + +```dos +dotnet list package --deprecated +dotnet list package --vulnerable +``` + ## Bump version numbers Search and replace 8.0.7 version number in the following: